1. Who we are

Meraki Capital Limited ("we", "us", "our") operates merakicapital.co.uk (the "Site"). We are the data controller for personal data collected through this Site.

Registered address: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF

Company number: 14971371

Contact email: info@merakicapital.co.uk

If you have questions about how we handle your data, contact us at the email above.

2. What data we collect

We may collect the following categories of personal data:

Data you provide directly

Name, email address, and contact details when you fill in forms or contact us

Any other information you choose to share with us

Data collected automatically

IP address and approximate location

Browser type and version

Pages visited, time spent, and referring URLs

Device type and operating system

Data from third parties

Analytics data from services such as Google Analytics

3. How we use your data

We process your personal data on the following legal bases under UK GDPR:

Purpose

Legal   basis

Responding to enquiries   and providing our services

Legitimate interests /   Contract performance

Sending marketing   communications (where you have opted in)

Consent

Analysing Site usage and   improving our services

Legitimate interests

Complying with legal   obligations

Legal obligation

We will not use your data for any purpose incompatible with those listed above.

4. Cookies

We use cookies and similar tracking technologies on the Site. A cookie is a small file placed on your device.

We use:

Strictly necessary cookies — required for the Site to function. No consent is needed.

Analytics cookies — help us understand how visitors use the Site. These are only set with your consent.

You can manage cookie preferences via our cookie banner or your browser settings. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

5. Who we share your data with

We do not sell your personal data. We may share it with:

Service providers acting as data processors on our behalf (e.g. hosting providers, email platforms, analytics tools), who are bound by data processing agreements

Professional advisers (lawyers, accountants) under obligations of confidentiality

Regulators and law enforcement where required by law

We require all third parties to respect the security of your data and to treat it in accordance with applicable law.

6. International transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR — for example, the UK International Data Transfer Agreement (IDTA) or adequacy decisions made by the UK Government.

7. How long we keep your data

We retain personal data only for as long as necessary for the purposes set out in this policy, or as required by law. When no longer needed, data is securely deleted or anonymised.

Data   type

Retention   period

Enquiry / contact form   data

[e.g. 2 years from last   contact]

Marketing opt-in records

Until you withdraw   consent + [1 year]

Website analytics data

[e.g. 26 months]

8. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

Access — request a copy of the data we hold about you

Rectification — ask us to correct inaccurate or incomplete data

Erasure — ask us to delete your data in certain circumstances

Restriction — ask us to restrict processing in certain circumstances

Portability — receive your data in a structured, machine-readable format

Object — object to processing based on legitimate interests or for direct marketing

Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at [privacy@yourcompany.com]. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk

Helpline: 0303 123 1113

9. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no transmission over the internet is entirely secure.

10. Links to other websites

Our Site may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies.

11. Children

Our Site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting the updated